Identity & Access Management (IAM) Engineer, Lead

Toyota•Plano, TX

About The Position

Toyota Financial Services (TFS) is seeking an experienced Lead Identity and Access Management (IAM) Engineer to join its Information Security team. The role sets technical direction for the SailPoint identity governance platform and provides subject-matter expertise across SailPoint IdentityIQ (IIQ) and SailPoint Identity Security Cloud (ISC). The engineer provides design oversight, leads contractor and partner engineering teams, and guides IAM engineers to ensure solutions align with TFS security standards, architecture, and best practices. The role leads engineering delivery and technical reviews across IIQ and ISC, oversees platform configuration and integrations, and directs application onboarding for connected and disconnected applications. It also oversees access request, certification, and separation-of-duties capabilities; enforces engineering and release standards; and serves as an escalation point for complex configuration issues and identity-related security incidents. The engineer partners with architecture, governance, compliance, cloud, application, and operations teams, while identifying improvements and automation opportunities.

Requirements

7+ years of hands-on experience in Identity and Access Management, including expert-level engineering experience with SailPoint Identity Security Cloud (ISC).
Proven experience leading technical design and architecture for enterprise identity governance solutions, including design review and approval.
Experience leading or providing technical oversight of a migration from SailPoint IIQ to ISC, including hybrid coexistence models.
Experience directing contractors, vendors, or systems integrator engineering teams and holding deliverables to defined quality and security standards.
Deep expertise in identity lifecycle management, including joiner/mover/leaver workflows, access certification, policy automation, and HR system integration.
Strong experience with ISC configuration, including transforms, cloud rules, workflows, connectors, Virtual Appliances, and SailPoint REST APIs.
Strong understanding of identity governance concepts, including role and access modeling, separation-of-duties policies, and risk scoring.
Proficiency with SAML, OAuth2, OIDC, and SCIM.
Strong understanding of security best practices and compliance frameworks, including SOX, GDPR, and PCI-DSS, and experience translating them into engineering standards.
Experience with Agile and SDLC practices and tools, including Jira, Confluence, and ServiceNow.
Proven ability to lead, mentor, and direct engineers in complex IAM environments, with strong communication skills for technical and leadership audiences.
Must have the right to work in the United States without requiring Toyota immigration-related employment support or sponsorship now or in the future.

Nice To Haves

Hands-on SailPoint experience, including Bean Shell rules, workflows, application onboarding, and certifications.
SailPoint ISC certification or equivalent IAM/security certification, such as CISSP.
Experience integrating IAM solutions with cloud platforms such as AWS or Azure.
Familiarity with Okta or CIAM platforms such as ForgeRock, Okta Customer Identity, or Auth0.
Bachelor’s degree in computer science, Information Security, or a related field.

Responsibilities

Lead engineering delivery for SailPoint IdentityIQ (IIQ) and Identity Security Cloud (ISC), ensuring alignment with IAM architecture, design patterns, TFS security standards, and best practices.
Provide technical oversight of configuration, integrations, and changes across IIQ and ISC environments.
Lead technical reviews of identity profiles, sources, transforms, access profiles, roles, lifecycle states, and workflows.
Lead contractor and partner engineering resources by setting expectations, reviewing deliverables, and enforcing TFS quality and security standards.
Provide technical direction, prioritization, and mentorship to IAM engineers, reviewing configurations and code and building team capability in ISC.
Enforce code review, secure configuration, SDLC, and release-readiness standards for SailPoint changes.
Lead application onboarding for connected and disconnected applications, including connector, Virtual Appliance, and provisioning configuration.
Oversee implementation of access request, certification, and separation-of-duties capabilities to meet governance and regulatory requirements.
Serve as the technical escalation point for complex SailPoint configuration and engineering issues and provide expert guidance during identity-related security incidents.
Partner with IAM Architecture, Governance, Compliance, Cloud, Application, and IAM Operations teams to align engineering work with approved designs, business needs, policy, and audit readiness.
Identify engineering improvements and automation opportunities and stay current with SailPoint capabilities and IAM best practices.

Benefits

Professional growth and development programs
Tuition reimbursement
Team Member Vehicle Purchase Discount
Toyota Team Member Lease Vehicle Program, if applicable
Comprehensive health care and wellness plans for the entire family
Toyota 401(k) Savings Plan with company match and an annual retirement contribution, if applicable
Paid holidays and paid time off
Referral services related to prenatal services, adoption, childcare, schools, and more
Tax-advantaged accounts, including Health Savings Account, Health Care FSA, and Dependent Care FSA
Relocation assistance, if applicable